Google Vertex AI — Agent Audit

ESTIMATED SCORE — NOT VERIFIED

This assessment is based solely on publicly available documentation, marketing materials, and product announcements. Google Vertex AI has not submitted to AgentGoverning for independent adversarial verification. This score is an estimate only and may not reflect actual platform capabilities. Google Vertex AI is invited to submit for formal assessment at framework@agentgoverning.com. Estimated scores carry no certification status.

How This Score Is Calculated

This estimated score reflects publicly documented agent deployment governance capabilities assessed across 10 capability categories against the 508 Agent Audit dimensions of AGS v2.2:
• Mandate & autonomy (27 dims)
• Agent orchestration (65 dims)
• Trust & identity (30 dims)
• Detection & containment (35 dims)
• Financial controls (45 dims)
• Human oversight (7 dims)
• Memory & knowledge (18 dims)
• Sector-specific (180 dims)
• Other core governance (93 dims)
• Deployment & lifecycle (8 dims)

Each category scored 0–100% based on public documentation coverage. Overall score = weighted average across all 10 categories.

Based solely on publicly available documentation as of April 2026.

What This Score Means

Google Vertex AI provides agent deployment infrastructure (Agent Engine, Agent Builder) and basic safety filtering (Model Armor), but limited agent-governance-specific architecture is evidenced in public documentation. Cloud IAM provides basic identity but not agent-specific governance. Model Armor filters content but is not documented as governing agent behaviour. The majority of Agent Audit dimensions are not evidenced in public documentation for this platform.. The platform is strong for model serving and agent deployment but governance is addressed through existing GCP infrastructure controls rather than agent-specific mechanisms.

Mandate

15%

Orchestration

10%

Trust

10%

Detection

15%

Financial

Oversight

10%

Memory

10%

Sector

10%

Core

12%

Deployment

15%

Key Strengths

AG-018

Output Integrity Verification

Model Armor provides basic content filtering and output integrity checks, preventing harmful or policy-violating agent outputs.

Score: 1 / 3

AG-012

Agent Identity Assurance

Cloud IAM provides basic agent identity through service account mechanisms and role-based access controls.

Score: 1 / 3

AG-008

Governance Continuity

GCP infrastructure provides basic governance continuity through standard cloud service reliability and availability mechanisms.

Score: 1 / 3

The following gap analysis is based on publicly available documentation only. These are estimated structural gaps, not verified findings. Google Vertex AI may have implemented controls not visible in public documentation.

Critical Gaps

AG-057

Delegation Chain Governance

No delegation chain governance. Tracking or governance of how authority is delegated between agents in multi-agent systems is not evidenced in public documentation.

Score: 0 / 3 — Structurally Absent

AG-142

Autonomy Progression Governance

No graduated autonomy framework. Agent autonomy levels cannot be progressively adjusted based on demonstrated competence.

Score: 0 / 3 — Structurally Absent

AG-786

Cryptographic State Sealing

No cryptographic seal or tamper-resistance mechanism for agent state. Agent state integrity cannot be independently verified.

Score: 0 / 3 — Structurally Absent

Full Dimension Assessment

Area	Strongest Capabilities	Status
Strongest Documented Capabilities
Deployment	Agent deployment infrastructure (Agent Engine)	Evidenced
Detection	Content filtering (Model Armor)	Evidenced
Identity	Agent identity (Cloud IAM)	Evidenced
Documentation	Provider documentation	Evidenced
Structurally Absent Capabilities
Mandate	Constitutional governance	Absent
Orchestration	Multi-agent topology governance	Absent
Oversight	Graduated autonomy	Absent
Oversight	Human factors governance	Absent
Core	Competence envelopes	Absent
Core	Truth/reward governance	Absent
Orchestration	Delegation chain governance	Absent
Trust	Trust attestation	Absent
Core	Cryptographic sealing	Absent
Core	Federated broadcasts	Absent
Financial	Financial crime governance	Absent
Core	All agent-specific enforcement	Absent

Legal Disclaimer. This assessment is an independent estimate based on publicly available documentation and does not constitute legal, compliance, or certification advice. AgentGoverning is not affiliated with, endorsed by, or sponsored by Google LLC or Alphabet Inc. or their affiliates. "Google", "Vertex AI", "Google Cloud", "Cloud IAM", and "Model Armor" are trademarks of Google LLC. All scores are estimated and unverified. This page does not constitute a certification, endorsement, or guarantee of any kind. The assessment methodology, scoring criteria, and dimension definitions are the intellectual property of AgentGoverning and are licensed under CC BY 4.0. For formal verification, platforms must submit to independent adversarial assessment. Estimated scores may change as new documentation becomes available. AgentGoverning accepts no liability for decisions made based on estimated scores.